Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: YdK7lgutPhmg8cZkXmCmIAigzo2yVc32e5dxuvmMuqo=
Subject key identifier: 19:AA:AC:7E:73:32:73:21:FC:E1:23:A7:10:E4:5A:1D:27:9F:C7:78
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 019771BF846543B5E9FCC402F0467286947A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 1034
Signing time: Sun 15 Jun 2025 04:01:06 +0000
Manifest this update: Sun 15 Jun 2025 04:01:06 +0000
Manifest next update: Mon 16 Jun 2025 04:01:06 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: 4sVDrDki6SyEhc60JRgcQgRq9Vhwn1xNO8blkXySFhQ=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:84:65:43:b5:e9:fc:c4:02:f0:46:72:86:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Jun 15 04:01:06 2025 GMT
Not After : Jun 16 04:01:06 2025 GMT
Subject: CN=19aaac7e73327321fce123a710e45a1d279fc778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:a7:de:98:60:9b:37:2e:4f:38:95:67:f4:
93:a7:5a:81:bf:7a:8f:67:46:54:51:02:c9:d6:92:
1d:02:26:fa:cd:d4:8a:34:83:64:1d:43:8b:76:9e:
85:5a:73:ce:7b:9a:66:49:a3:23:97:9f:d5:1b:5d:
30:ce:20:6c:fd:16:fb:42:3c:e9:65:0f:38:28:b0:
21:a6:81:87:90:4e:01:7c:42:41:b5:05:bb:8f:6c:
5e:be:6a:14:55:20:00:40:6d:8d:50:bb:08:2d:e1:
73:14:be:3f:9b:d2:13:4e:9e:95:06:02:23:c8:a5:
50:91:3e:3c:19:b7:2b:5e:22:da:b2:8b:43:56:ea:
2e:be:9e:2a:86:68:af:e1:d7:4a:10:78:4a:2b:e2:
c5:8d:d6:9f:5d:7a:fa:6c:5a:c0:e1:ed:c2:49:12:
36:78:85:e7:54:81:27:4a:a5:11:2c:05:e1:d8:ca:
08:82:88:30:68:c5:0d:4e:5a:81:c4:a4:09:71:93:
4c:fd:01:8a:dd:f2:bb:ec:9f:2f:2e:6e:8f:93:61:
87:58:16:a0:60:50:76:2f:42:b4:39:79:42:14:30:
5d:cc:e8:49:87:e1:6e:5a:67:85:b6:9f:31:ad:c9:
96:20:e0:0f:cf:e7:7a:11:ef:71:68:43:b0:61:2e:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:AC:7E:73:32:73:21:FC:E1:23:A7:10:E4:5A:1D:27:9F:C7:78
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bf:4a:3d:0e:35:11:cb:15:96:95:51:03:40:5c:37:79:54:
b0:09:ec:d0:16:41:aa:68:13:1e:80:ff:20:0e:ba:1d:a3:22:
63:4d:90:84:b0:2c:a8:e9:87:3e:c5:25:6e:7e:9c:4f:84:7a:
e9:96:12:b0:8d:8a:29:2b:74:bd:ff:d6:7e:44:22:23:24:85:
6c:3b:5b:94:11:c7:76:e1:d9:2a:af:a2:94:ae:49:6a:9d:83:
63:9f:04:72:7b:d1:b5:ae:59:59:fb:06:63:db:48:b1:32:12:
35:02:19:fa:77:1b:16:01:7e:e0:81:13:c3:29:19:2c:c1:48:
d3:09:3a:5f:e6:ef:15:9a:e1:c1:74:19:bd:e7:73:b5:de:11:
bf:2b:46:e3:f3:74:2e:68:60:f9:fa:34:f5:68:32:77:74:fd:
69:2f:ec:fa:94:e6:66:4c:ea:ac:af:b2:ec:bb:82:cd:15:30:
d7:ab:16:40:47:77:a5:f8:ac:39:82:87:f4:6f:d8:cd:2f:6a:
80:c6:df:93:cc:e7:2f:ce:4d:4e:19:5c:79:0c:be:d3:e4:fd:
ee:5c:5a:f0:5d:de:c6:71:2b:f4:05:1b:b2:98:b1:55:e0:3c:
90:5e:54:dc:98:38:81:91:69:dc:36:64:20:c5:fd:a6:92:6a:
11:df:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:27:41 2025 by rpki-client